In the claims : 

The following listing of claims will replace all prior listings and versions of the claims. 

1. (Original) A method of providing a key container by a key container directory, the 
key container to be used to secure a message that will be sent from a sender to a recipient, the 
method comprising the steps of: 

receiving a request for the key container from a requestor; and 

in response to the request, providing a key container to the requestor that contains a 

cryptographic key of a gateway that the message will transit and an address of the sender or the 

recipient. 

2. (Original) A method of providing a key container according to claim 1, wherein the 
key container directory is remote from the gateway, such as external to the network domain of 
the gateway. 

3. (Currently amended) A method of providing a key container according to claim 1 or 
2, wherein the key container directory is external to the network domain of the recipient. 

4. (Currently amended) A method of providing a key container according to claim 1, 2 
ef4r wherein the message is transmitted from the sender over an insecure computer network, 
such as the Internet. 

5. (Currently amended) A method of providing a key container according to any one of 
the preceding claims claim 1 , wherein the network domain of the recipient is secure. 

6. (Currently amended) A method of providing a key container any on e of th e preceding 
claim s claim j, wherein the step of providing a key container comprises providing a key 
container for each gateway that the message will transit. 

7. (Currently amended) A method of providing a key container according to any one of 
th e pr e c e ding claims claim j, wherein the method further comprises the step of determining the 
identity of one or more gateways that the message will transit. 
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8. (Currently amended) A method of providing a key container according to any one of 
th e pr e c e ding claims claim 1 , wherein the key container directory provides multiple key 
containers in the response to the request. 

9. (Currently amended) A method of providing a key container according to any one of 
the prec e ding claims claim K wherein the requestor is the sender of the message and the request 
includes the address of the recipient. 

10. (Original) A method of providing a key container according to claim 9, wherein the 
step of requesting the key container includes an indication that an encryption key container is 
requested. 

1 1 . (Original) A method of providing a key container according to claim 9, wherein the 
method further comprises the step of determining what type of key container should be provided 
to the requestor. 

12. (Original) A method of providing a key container according to claims 11, wherein 
the step of determining comprises determining whether the requestor is the sender of the 
message, and if so, providing an encryption key container to the requestor. 

13. (Currently amended) A method of providing a key container according to claims 1 1 
e^42 claim H , wherein the step of determining further comprises determining whether the 
requestor is from the same domain as the gateway, and if not, providing the encryption key 
container containing the cryptographic key of the recipient's gateway. 

14. (Currently amended) A method of providing a key container according to claims 1 1 , 
12 or 13 claim IK wherein the step of determining further comprises determining whether the 
requestor is from the same domain as the gateway, and if so, providing the encryption key 
container having the cryptographic key of the requestor's gateway. 

15. (Currently amended) A method of providing a key container according to any on e 
of claims 1 to 8 claim L wherein the requestor is the gateway and the request includes the 
address of the sender. 
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16. (Currently amended) A method of providing a key container according to any on e 
of claims 1 to 8 or 15 claim 1 , wherein the step of requesting the key container includes an 
indication that a signing key container is requested. 

17. (Currently amended) A method of providing a key container according to any on e 
of claims 1 to 8, 15 or 16 claim 1 , wherein the method farther comprises the step of determining 
what type of key container should be provided to the requestor. 

1 8. (Currently amended) A method of providing a key container according to claim s 
claim 17, wherein the step of determining further comprises determining whether the requestor 
is the gateway, and if so, providing the signing key container containing the cryptographic key 
of the gateway and the message sender's address. 

19. (Currently amended) A method of providing a key container according to claims 
claim 18, wherein the sender's address is from the same domain as the gateway. 

20. (Currently amended) A method of providing a key container according to any on e 
of claims 1 1 to 14 or 17 to 19 claim 1 1 , wherein the step of determining is based on parameters 
associated with the request. 

21 . (Currently amended) A method of providing a key container according to any one 
of the pr e c e ding claims claim K wherein the method further comprises the step of the requestor 
authenticating with the key container directory. 

22. (Currently amended) A method of providing a key container according to claim 21 
and limited by claim 20 , wherein the method further comprises the step of the requestor 
authenticating with the key container directory and the step of determining is based on the 
information provided by the requestor when authenticating with the key container directory. 

23. (Currently amended) A method of providing a key container according to claim 21 
6F-32, wherein the step of authenticating is through the use of a valid username and password 
combination. 
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24. (Currently amended) A method of providing a key container according to any on e 
of th e pr e c e ding claims claim I, wherein once the request has been received, the method further 
comprises the step of generating the requested key container. 

25. (Currently amended) A method of providing a key container according to any one 
of the preceding claims claim K wherein the request is made using a computer communication 
protocol , such as selected from the group consisting of Lightweight Directory Access Protocol 
(LDAP), Directory Access Protocol (DAP), Certification Management Protocol (CMP), that of 
XML Key Management Specification (XKMSX or th e and HyperText Transfer Protocol 
(HTTP). 

26. (Currently amended) A method of providing a key container according to any one 
of th e pr e c e ding claims claim \, wherein the key container contains a cryptographic key that is a 
public key. 

27. (Currently amended) A method of providing a key container according to any on e 
of th e pr e c e ding claims claim K wherein the key container is a digital certificate , such as a 
X.509 digital certificate . 

28. (Currently amended) A method of providing a key container according to any on e 
of th e prec e ding claim s claim K wherein the key container is a Pretty Good Privacy (PGP) 
public key. 

29. (Currently amended) A method of providing a key container according to any one 
of the preceding claims claim 1_ , wherein the address contained in the key container is an e-mail 
address and the gateway is an e-mail gateway. 

30. (Currently amended) A method of providing a key container according to any on e 
of th e preceding claims claim L wherein the key container is provided for a specific message. 

3 1 . (Currently amended) A method of providing a key container according to any on e 
of th e pr e ceding claims claim 1 , wherein the key container «-a contains information that 
invalidates its use at a time in the future. 
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32. (Original) A method of providing a key container according to claim 31, wherein 
the time is of sufficiently short duration that the key container can be used for only a few 
messages. 

33. (Currently amended) A method of providing a key container according to any on e 
of the preceding claims claim 1 , wherein the key container contains the same container 
identifiers , s uch as serial number and issu e r name, of the key container of the gateway. 

34. (Currently amended) A method of providing a key container according to any on e 
of claims 1 to H or 20 to 33 claim K wherein the key container is an encryption key container to 
be used for encryption operations. 

35. (Original) A method of providing a key container according to claim 34, wherein 
the key container contains a parameter that indicates that the key container is to be used for 
encryption functions. 

36. (Currently amended) A method of providing a key container according to any on e 
of claims 1 to H or 20 to 35 claim 1 , wherein the key container secures the message through use 
of the cryptographic key to encrypt the message. 

37. (Currently amended) A method of providing a key container according to any one 
of claim s 1 to H or 20 to 36 claim K wherein the sender's address is from the same domain as 
the gateway. 

38. (Currently amended) A method of providing a key container according to any one 
of claims 1 to 8 or 15 to 33 claim L wherein the key container is a signing key container. 

39. (Currently amended) A method of providing a key container according to any on e 
of claims 1 to 8, 15 to 33 or 38 claim K wherein the key container contains a parameter that 
indicates that the key container is to be used for signing operations. 

40. (Currently amended) A method of providing a key container according to any on e 
of claims 1 to 8, 1 5 to 33, 3 8 or 39 claim 1 , wherein the key container secures the message by 
being carried with the message. 
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41 . (Currently amended) A method of providing a key container according to any one 
of claimo 1 to 8, 15 to 33, 3 8 , 39 or 40 claim L wherein the key container includes information 
that permits a requestor to determine the authenticity and integrity of the key container. 

42. (Currently amended) A method of providing a key container according to any one 
of th e preceding claim s claim j_ , wherein the key container contains security preferences of the 
gateway , such as S e cure Multipart Internet Mail Ext e nsions (S/MIME) Capabiliti e s or PGP 
Symm e tric Algorithm Pr e fer e nces . 

43. (Currently amended) A method of providing a key container according to any one 
of the preceding claims claim j , wherein the key container includes information about the key 
container directory that provided the key container. 

44. (Currently amended) A key container directory operable to provide a key container 
according to the method d e scrib e d in any on e of the prec e ding claims of claim L wherein the 
key container directory is remote from the gateway , such ext e rnal to the network domain of the 
gat e way . 

45. (Original) A key container directory according to claim 44, wherein the key 
container has a datastore of cryptographic keys that can be contained in any provided key 
container. 

46. (Original) A method of receiving a key container comprising the steps of: 
sending a request to a key container directory for a key container to be used to secure a 

message that is transmitted from a sender to a recipient; and 

receiving from the key container directory the key container that contains the 
cryptographic key of a gateway that the message will transit and an address of the sender or the 
recipient. 

47. (Original) A method of receiving a key container according to claim 46, wherein the 
method is performed by the sender of the message. 
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48. (Currently amended) A method of receiving a key container according to claim 46 
of-47, wherein the step of sending a request for the key container includes an indication that an 
encryption key container is requested. 

49. (Currently amended) A method of receiving a key container according to claim 46, 
17 or 18, wherein the step of sending the request for the key container includes the address of 
the recipient. 

50. (Currently amended) A method of receiving a key container according to any on e of 
claims 46 to 19 claim 46 , wherein the method ftirther comprises the step of encrypting the 
message using the cryptographic key contained in the key container. 

51 . (Currently amended) A method of receiving a key container according to any on e of 
claims 4 6 to 50 claim 46 , wherein the key container is an encryption key container to be used for 
encryption operations. 

52. (Currently amended) A method of receiving a key container according to any one of 
claims 4 6 to 51 claim 46 , wherein the key container contains a parameter that indicates that the 
key container is to be used for encryption functions. 

53. (Currently amended) A method of receiving a key container according to any on e of 
claims 16 to 52 claim 46 , wherein the key container secures the message through use of the 
cryptographic key to encrypt the message. 

54. (Currently amended) A method of receiving a key container according to any one of 
claims 16 to 53 claim 46 , wherein the sender's address is from the same domain as the gateway. 

55. (Original) A method of receiving a key container according to claim 46, wherein the 
method is performed by the gateway. 

56. (Currently amended) A method of receiving a key container according to claim 46 
e*5$, wherein the step of sending the request for the key container includes an indication that a 
signing key container is requested. 
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57. (Currently amended) A method of receiving a key container according to claim 46, 
55 or 56, wherein the step of sending the request for the key container includes the address of 
the sender. 

58. (Currently amended) A method of receiving a key container according to any one of 
claims 46 or 55 to 57, wherein the key container is a signing key container. 

59. (Currently amended) A method of receiving a key container according to any on e of 
claims 16 or 55 to 58 claim 46 , wherein the key container contains a parameter that indicates 
that the key container is to be used for signing operations. 

60. (Currently amended) A method of receiving a key container according to any one of 
claims 16 or 55 to 59 claim 46 , wherein the key container secures the message by being carried 
with the message. 

61 . (Currently amended) A method of receiving a key container according to any on e of 
claims 16 to 60 claim 46 , wherein the key container includes information that permits a 
requestor to determine the authenticity and integrity of the key container. 

62. (Currently amended) A method of receiving a key container according to any on e of 
claims 16 to 61 claim 46 , wherein the key container contains security preferences of the 
gateway , such as S e cur e Multipart Int e rn e t Mail Ext e nsions (S/M1ME) Capabilities or PGP 
Symmetric Algorithm Preferences . 

63. (Currently amended) A method of receiving a key container according to any one of 
claims 4 6 to 62 claim 46, wherein the key container includes information about the key 
container directory that provided the key container. 

64. (Currently amended) An e-mail client that is operable to perform the method of 
receiving a key container as according to any one of claims 16 to 51 claim 46 . 

65. (Currently amended) A gateway that is operable to perform the method of receiving 
a key container according to any on e of the claims 4 6 or 55 to 60 claim 46 . 
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66. (Original) A key container to be used to secure a message that is transmitted from a 
sender to a recipient using a gateway, wherein the key container contains a cryptographic key of 
the gateway, an address of the sender or the recipient and information that invalidates the use of 
the key container at a time in the future. 

67. (Cancelled) 

68. (Cancelled) 

69. (Cancelled) 
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